Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
File: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft (raw, json)
Hash identifier: PVL753BzJkjl1DFI1Sv7wQuD/jbttptKBFSSk2Ayg1Q=
Subject key identifier: F1:60:80:5A:71:2B:CE:B7:71:83:E4:66:CC:6B:10:83:E3:15:0A:3F
Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Certificate serial: 01965E1A66EFEB8865C496B25BCD5AE5E051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
Manifest number: 14
Signing time: Tue 22 Apr 2025 15:25:10 +0000
Manifest this update: Tue 22 Apr 2025 15:25:10 +0000
Manifest next update: Wed 23 Apr 2025 15:25:10 +0000
Files and hashes: 1: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl (hash: 2/5yaDbS+Uv84BuQ1qWR52VG2reSidQf05TJVmjdSuU=)
2: B5FqXDaYZCVMb2B7pm4jOy1LI9c.roa (hash: YqjrPS9Nh7fuqNTun1gC0PMGcvqjmxQx8dHgTyQYeDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:1a:66:ef:eb:88:65:c4:96:b2:5b:cd:5a:e5:e0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Validity
Not Before: Apr 22 15:25:10 2025 GMT
Not After : Apr 23 15:25:10 2025 GMT
Subject: CN=f160805a712bceb77183e466cc6b1083e3150a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:0c:83:83:1c:9c:74:e7:6f:75:bf:d0:3e:
04:5a:6c:86:ef:85:ef:1e:46:7a:e7:8e:5b:0d:41:
f5:19:54:72:9f:8c:de:10:28:88:b9:23:39:83:d5:
6b:f2:03:11:6f:a2:51:3f:4c:05:58:4c:11:cb:31:
fa:e3:6a:88:d7:2b:78:20:bb:ea:f8:6a:39:39:f6:
83:18:c6:0b:4b:34:c2:a5:f1:fe:f6:79:52:1d:cd:
1e:93:6e:01:b8:f4:24:1f:9f:b0:1b:3a:58:65:a1:
34:e4:5b:3b:ba:14:41:4b:91:f4:51:e1:77:27:31:
93:47:ba:f0:5c:06:6d:46:9e:07:38:7c:8e:0c:f4:
ad:6d:54:1f:e2:e1:e3:79:f0:64:4a:e6:88:78:1d:
f0:ed:a6:64:a4:77:45:4a:16:e0:9c:36:a2:ac:17:
c6:8e:80:cb:6b:b9:1a:18:df:ac:88:88:df:ec:f0:
64:44:8d:b8:ad:fb:0a:9c:7a:10:d3:e7:02:87:1b:
28:21:ca:90:be:b1:e2:3d:60:52:43:e2:23:1c:20:
93:d7:d6:e4:75:13:a4:57:e4:a0:46:1f:2c:88:1d:
be:64:c4:dc:1c:b1:b3:40:db:82:4c:bd:19:6a:2e:
bf:e5:ac:3d:b4:73:f9:5f:85:a9:08:c8:e2:46:6c:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:60:80:5A:71:2B:CE:B7:71:83:E4:66:CC:6B:10:83:E3:15:0A:3F
X509v3 Authority Key Identifier:
keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:87:58:3d:12:6b:87:ce:47:ff:d3:5f:a0:d2:78:97:ce:c9:
c5:96:ab:93:b7:65:f5:b5:35:4a:59:36:de:eb:2a:44:ec:0a:
e2:03:69:4d:3b:ff:cd:cc:b9:e8:b6:ed:bd:03:7d:a0:5f:22:
0a:01:f3:dc:1e:4e:86:35:ae:d8:62:ec:6c:5c:fe:4c:00:2e:
d7:fc:3e:4a:39:e9:c8:81:7c:e3:ee:a4:28:9b:63:11:7d:36:
5c:2b:5e:65:66:0e:00:aa:42:17:7c:73:b4:de:c0:9a:0b:7f:
f9:90:62:c9:0b:e9:10:12:12:a6:82:48:4c:2f:2a:30:cf:17:
0e:f0:09:62:f9:ad:cd:cd:f7:29:c8:70:ed:ca:4a:3e:03:cb:
93:c2:41:02:a1:4c:61:d0:ae:52:cd:ad:d8:eb:a8:5b:9e:d6:
7f:e3:7c:bd:d7:c5:a0:53:a4:23:4c:cd:17:f6:80:55:54:97:
a6:6f:bb:d7:b9:28:3c:42:42:a3:7e:1d:2b:89:09:b0:61:ef:
15:66:b9:f0:06:f0:6e:96:95:62:22:4e:89:7e:63:17:68:05:
91:d0:b9:70:94:77:3d:4f:09:89:e3:ee:a0:55:98:cb:cb:f0:
22:12:a8:f3:5e:c0:8d:53:2d:e5:5d:66:b8:6f:87:96:15:cd:
f7:c6:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:16 2025 by rpki-client